avast! does not scan https connection. It scans http.

If malware were to be downloaded via https… the file shield/deepscreen will handle it.